Network Access Control

If any one of you are interested in setting up opensource tacacs along with RANCID on Unix(ubuntu)i have a small blog on the same with step by step instructionshttp://bejoybkn.blogspot.com/Hope it will be helpfulBejoy

Hi All,we are implementing ACS 4.2. our customer asked us if it's possible that ACS sends email notification if certain commands applied to the router or switch. if it's not possible, what is the best solution to send email notification for certain c...

Looking for the steps to configure wired clients using certificate authentication only - ie, once a certificate is presented to the ACS that is issued by a trusted CA, the connection is permitted.No need to tell me about switch configuration. This is...

I've inherited the adminstration of our ACS and right now it runs on Windows 2003 servers at version ACS v3.x.But I have two ACS 1120 appliances (ACS 4.x) to migrate all AAA to and the previous administrator had things close to completion but I'm con...

In order to develop precise and flexible access control policies, I want to create policy based on group membership. However, the user’s “Identity Groups” selection dialogue box only lets me select just one group per user. How can a user be a member ...

Hi,We have been hoping to deploy Cisco TrustSec for our new mobile working solution.This would basically enable to perform posture assessments and assign resources to users based on usernames, whether they be1. Wired2. Wireless3. VPN usersit now turn...

Hi my friendsI can add a ACS 5.1 to an Active Directory without using the administrator account, I have a domain administrator account by another name. I can use this account to include the ACS domain.I have a account domain admin but when i try to a...

Hello, I have a question. it is posible implement NAC Appliance SSO AD VG/Real IP - L2/L3 for OU (Organization Unit), for example; if i have OU sales and OU market in the windows domain X. it is posible restrict the police and assign diferent network...

I am looking for some documentation to  -  Set up a Juniper Firewall as a Radius Client on Cisco ACS Server.I have already had a look at the following link:http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007d...

Hi All,Is there a way to peform an unttended installation for Cisco NAC Agent. We are trying to deploy the NAC Agent using Tivoli but the administrators of this Tool asked us if the installation package of the NAC Agent has an option to perfom a sile...

Is it possible to set up Exec level privleges and their associated commands in RADIUS? I am looking to set up a sub level, say 7, with limited CLI privileges. I can do this locally but want to have the person telnet to router, get authenticated by RA...

Hi,We are using ACS 5.2 and we are trying to create a Microsoft Active Directory (AD) Identity Store. We have a user to be used in the Active Directory creation General page and we would like to know how the test communication / ACS to AD communicati...

Hello guys, Could someone help me out. I encountered some strange issues with one of our appliances in the field. Reinstalled the damn thing and encountered the strange issues. No errors.. did some memory test and the seagate harddisk test and encoun...

Hi all,I would like to disable NAC policy control from my ACS 4.0.I would like only 802.1x AAA on my switch ports.Also I'd like to assign a different VLAN to different MAB devices by RADIUS user attribute, in order to differentiate vlan for printers,...